Re: Oracle 9i DB Security Hole

Serge Rielau <srielau_at_ca.ibm.com> wrote in message news:<3CBEDF46.AA69F910_at_ca.ibm.com>...
> Self-control by their main competitor - and it's hard - trust me.
> It's not the existence of the bug that is so bad. It's that it took screaming
> customers to deliver a patch after it was known for 4 months that's remarkable.
> One has to give credit to Microsoft for handling these things a lot more openly,
> despite knowing that it draws fire from the competition.
> Just my 2 cents
> Serge

As I just received my notification from Oracle Metalink regarding this problem, I agree that they didn't handle this correctly. However, knowing Larry Ellison's ego, my guess is that he wouldn't want to have his "unbreakable" claim tainted which shows to me that he and Oracle care more about their image/$$$ than fixing the gaping security hole they created.

BTW, Microsoft is much better at this - then again anyone would be if they had to do it as often!

Just my $0.02 worth.

Devin Conner, DBA
devin_at_vorpel.com Received on Fri Apr 19 2002 - 10:31:41 CDT